   (when-let [target-guid (:legacy-guid group)]
     (seq
       (filter #(= target-guid (-> % :single-instance-object-identity :target-guid))
-              (acl/get-permitting-acls (put-sids-in-context context)
+              (acl/get-permitting-acls context
                                        :single-instance-object "GROUP" permission)))))
 
 (defn- describe-group


(defmethod qe/add-acl-conditions-to-query :access-group
  [context query]
  (let [system-condition (when (get-system-acls context :read)
                           (qm/negated-condition (qm/exist-condition :provider-id)))
        provider-ids (map #(-> % :provider-object-identity :provider-id)
                          (get-all-provider-acls context :read))

  "Throws a permission service error if no ACLs exist that grant the desired permission to the
  context user on group."
  [context action-description permission group]
  (let [context (put-sids-in-context context)]
    (when-not (or (get-instance-acls context permission group)
                  (get-provider-acls context permission group)
                  (get-system-acls context permission))
      (throw-group-permission-error action-description group))))

(defn verify-can-create-group
  "Throws a service error if the context user cannot create a group under provider-id."
